Sign in

codewithromi.bsky.social

@codewithromi.bsky.social
0 followers 0 following 0 posts
PostsRepliesMedia
CodeWithRomi @codewithromi.bsky.social · 22h
the zero-knowledge proof in signal's new numberless setup isn't replacing your phone number. it's hiding your payment from signal itself. two totally different things. wrote the whole thing up. #cybersecurity #opensource #privacy
codewithromi.com
How Signal Made the Phone Number Optional, and What the Zero-Knowledge Proof Actually Protects
Signal's new numberless registration is Android beta only and costs a one-time fee. The zero-knowledge proof is not what replaces your phone number; it is what stops Signal linking your payment to your account.
010
CodeWithRomi @codewithromi.bsky.social · 11/10/2026
if your BookOrbit scan finishes but finds nothing, it's almost always a permissions mismatch on the mapped volume. fix that one thing and your whole ebook/audiobook/comic library shows up. wrote the whole thing up #selfhosted #homelab #docker
codewithromi.com
Self-Host BookOrbit on Your NAS: Ebooks, Audiobooks and Comics in One Library
BookOrbit gives you a browser reader, OPDS and two-way Kobo and KOReader sync across your whole library. Here is the Docker setup on a NAS, plus the permissions mistake that makes a scan succeed and find nothing.
030
CodeWithRomi @codewithromi.bsky.social · 09/10/2026
llm coding agents helped ship a conformant linux gpu driver for the m4 mac mini in roughly one month. wild what's possible when you let the agents handle boilerplate. wrote the whole thing up #linux #opensource #homelab
codewithromi.com
Building a Linux GPU Driver for the M4 Mac mini in One Month, Mostly With Coding Agents
Cody Ho and Niklas Sheth built a conformant Linux GPU driver for the M4 Mac mini in about a month, largely with LLM coding agents. It ships in Gravity Linux, a Fedora remix forked from Asahi Linux over that exact question.
140
CodeWithRomi @codewithromi.bsky.social · 07/10/2026
if an AI coding agent has repo access, check what it can actually reach. ZCode was uploading full git histories quietly. audit your agent permissions before something leaks. wrote the whole thing up #homelab #cybersecurity #selfhosted
codewithromi.com
An AI Coding Agent Uploaded Whole Git Histories: How to Lock Down Your Homelab
ZCode, Z.ai's GLM coding app, was caught uploading entire Git histories in September 2026 and fixed it within days. Here is how to audit and contain every other agent that reads your repos.
150
CodeWithRomi @codewithromi.bsky.social · 05/10/2026
if you cache target/ in GitHub Actions with Miri, every env var in that run could leak to any PR. fixed in sept 26 nightly but rotate your secrets anyway. wrote the whole thing up on the blog #devops #cybersecurity #opensource
codewithromi.com
Miri Was Leaking CI Secrets Through GitHub Actions Caches: What to Clean Up
Miri wrote every environment variable into target/, so caching that directory in GitHub Actions could hand your secrets to a pull request. Fixed in the 22 September 2026 nightly. Clear your caches and rotate anyway.
110
CodeWithRomi @codewithromi.bsky.social · 03/10/2026
if your user is in the docker group, any process running as you can get full root. no exploit needed. omarchy's default did exactly this. 4.0.1 fixes it but check your setup anyway. wrote the whole thing up #docker #selfhosted #cybersecurity
codewithromi.com
Omarchy: Any User Process Can Escalate to Root
Omarchy shipped a default that put your user in the docker group, which is root by another name. What actually happened, and why 4.0.1 matters.
020
CodeWithRomi @codewithromi.bsky.social · 01/10/2026
ubuntu still has zero patches for those four linux kernel local root vulns from sept 18. debian trixie is clean but bookworm users are still exposed on TUNderflow. check your distro before assuming you're covered. wrote the whole thing up. #linux #cybersecurity #homelab
codewithromi.com
Patch These Four Linux Kernel Local Root Vulns Now: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Four Linux kernel local root bugs went public on 18 September 2026 with working exploits. Checked 29 September: Debian trixie is patched, bookworm still is not for TUNderflow, and Ubuntu has shipped nothing yet.
030
CodeWithRomi @codewithromi.bsky.social · 29/09/2026
ufw tip: set your default to deny incoming, allow outgoing before you open any ports. stops you accidentally exposing stuff while you're mid-setup. wrote the whole thing up on the blog. #homelab #linux #selfhosted
codewithromi.com
Protect Your Homelab with UFW Firewall: 5-Minute Setup
Five-minute UFW firewall setup for your homelab, sane defaults, SSH/HTTPS allow, LAN-only rules, and verification. The exact config I use.
021
CodeWithRomi @codewithromi.bsky.social · 27/09/2026
unauthenticated path traversal to RCE is about as bad as it gets. CVE-2026-87902 is already being exploited in the wild, so if you're running WordPress, get to 7.1.2 now. wrote the whole thing up on the blog #selfhosted #cybersecurity #wordpress
codewithromi.com
WordPress 7.1.2 Patches a Critical Path Traversal to RCE: Update Now
CVE-2026-87902 lets an unauthenticated request include a local PHP file through page template resolution. It is on CISA's exploited list, and the fix is WordPress 7.1.2 or the backport for your branch.
010
CodeWithRomi @codewithromi.bsky.social · 25/09/2026
tested cpu vs gpu vs npu for frigate object detection on the same mini pc. the npu was actually slower than the gpu for real-time inference. not what i expected. wrote the whole thing up #homelab #selfhosted #opensource
codewithromi.com
What Is an NPU Actually Good For? Testing CPU vs GPU vs NPU for Frigate
NPUs are showing up in more mini PCs, but are they actually useful for homelab AI workloads like Frigate object detection?
121
CodeWithRomi @codewithromi.bsky.social · 23/09/2026
tailcat lets you pipe data between machines over wireguard encryption with zero tailscale account needed. no control plane, no coordination server, just raw encrypted transport. wrote the whole thing up. #homelab #networking #opensource
codewithromi.com
tailcat: Netcat Over Tailscale's Data Plane, No Control Plane Needed
tailcat lets you pipe data between machines using Tailscale's encrypted WireGuard transport without needing a Tailscale account or coordination server.
020
CodeWithRomi @codewithromi.bsky.social · 21/09/2026
tailscale gives every device in your homelab a real IP that follows it anywhere. no port forwarding, no firewall rules. i access my entire lab from my phone now. wrote the whole thing up on the blog. #homelab #selfhosted #networking
codewithromi.com
How I Access My Entire Homelab from Anywhere with Tailscale
No port forwarding. No VPN server to maintain. Just secure remote access to every device in my homelab from anywhere in the world via Tailscale's mesh.
020
CodeWithRomi @codewithromi.bsky.social · 19/09/2026
if your APC UPS has a SmartSlot, you don't need to spend $150+ on a network card. OpenNMC is an open-source drop-in that gets you NUT and MQTT monitoring for almost nothing. wrote the whole thing up. #homelab #selfhosted #opensource
codewithromi.com
OpenNMC: The Open-Source Replacement for Expensive APC Network Management Cards
OpenNMC is an open-source card for APC SmartSlot UPS units that gives you NUT and MQTT monitoring without paying for APC's pricey network management cards.
130
CodeWithRomi @codewithromi.bsky.social · 17/09/2026
jellyfin 12.0's database migration is one-way, so you can't just roll back if something breaks. back up your config folder before you touch anything. full guide on the blog #jellyfin #selfhosted #docker
codewithromi.com
Jellyfin 12.0 Is Out: How to Upgrade Your Homelab Media Server
Jellyfin 12.0 is out, and its database upgrade is one-way. Here's how to move your Docker or Portainer stack over safely.
010
CodeWithRomi @codewithromi.bsky.social · 15/09/2026
if you self-host Forgejo, drop what you're doing and update to 16.0.4 or 15.0.8 LTS. there's a critical RCE bug (CVE-2026-89094) being patched and skipping this one isn't worth the risk. wrote it all up on the blog #selfhosted #homelab #opensource
codewithromi.com
Forgejo 16.0.4 Patches a Critical RCE Vulnerability: Update Now
Forgejo 16.0.4 and 15.0.8 LTS fix a critical remote code execution bug, CVE-2026-89094. If you self-host Forgejo, this update is not optional.
010
CodeWithRomi @codewithromi.bsky.social · 14/09/2026
the thing that took my whole house offline: setting pi-hole as your dns BEFORE testing it. always validate on one device first. saved me a second argument with my wife. full walkthrough in the thread 👇 #homelab #selfhosted #networking
321
CodeWithRomi @codewithromi.bsky.social · 13/09/2026
giving ai live access to your homelab? first thing i did was lock it to a fixed command allowlist over ssh. read-only, no surprises. full walkthrough in the thread #homelab #selfhosted #automation
241
CodeWithRomi @codewithromi.bsky.social · 13/09/2026
if your ai can't see live data, it's just guessing. i gave mine read-only ssh access + a fixed command allowlist so it reads real stats without touching anything. full walkthrough in the thread #homelab #selfhosted #automation
121
CodeWithRomi @codewithromi.bsky.social · 13/09/2026
bookstack organizes your youtube scripts into books, chapters, and pages. way more intuitive than notion for video planning, and it costs nothing to run. wrote the whole thing up on the blog #selfhosted #homelab #opensource
codewithromi.com
Self-Hosted Notion Alternative: BookStack for YouTube Creators
Stop paying $10/month for Notion. BookStack gives you a self-hosted wiki for free, perfect for YouTube scripts, video ideas, and homelab documentation.
021
CodeWithRomi @codewithromi.bsky.social · 11/09/2026
pi-hole on proxmox tip: set your router's DHCP to point at pi-hole's IP, not the other way around. skipped that step and wondered why ads still showed up. wrote the whole thing up on the blog #homelab #proxmox #selfhosted
codewithromi.com
Block Ads on Every Device: Pi-hole on Proxmox (Full Setup Guide)
Block ads and trackers on every device with Pi-hole on Proxmox, 20-minute setup, plus the gotchas I hit live so you don't troubleshoot blindly.
130
CodeWithRomi @codewithromi.bsky.social · 09/09/2026
one caddy reverse proxy handles routing for all five of my sites, no nginx config chaos. point your dns, drop a caddyfile block, done. wrote the whole thing up on the blog #homelab #selfhosted #docker
codewithromi.com
How I Run Multiple Websites From One Homelab Server
Host five sites on one box: Proxmox + Docker + Caddy as a reverse proxy + Cloudflare for DNS and TLS. Full architecture and the Caddyfiles I actually use.
020
CodeWithRomi @codewithromi.bsky.social · 07/09/2026
the recidive jail in fail2ban is underrated. it watches your other jails and perma-bans repeat offenders automatically. set it once and stop babysitting your logs. full guide on the blog #homelab #selfhosted #cybersecurity
codewithromi.com
Fail2Ban Setup (Homelab Security Part 2)
UFW blocks ports; Fail2Ban blocks the attackers trying to get through them. The exact jail.local, custom Ghost-login filter, and recidive setup I run.
030
CodeWithRomi @codewithromi.bsky.social · 05/09/2026
if your discord bot crashes at 2am, you don't have to be awake to fix it. a three-tier ai fallback (local first, cloud only if needed) can catch and patch its own bugs. wrote the whole thing up #homelab #automation #opensource
codewithromi.com
Building an AI-Powered Self-Healing Discord Bot
A Discord bot that detects its own bugs and fixes them using a three-tier AI fallback: local Phi-3 → Groq cloud → Claude API. The whole architecture, with code.
030
CodeWithRomi @codewithromi.bsky.social · 03/09/2026
asking an llm 'explain X' is the worst way to learn from it. ask it to give you an analogy, then poke holes in it. you learn 10x more. wrote the whole thing up on the blog #homelab #linux #opensource
codewithromi.com
How to Use LLMs as Your Personal Tutor for Complex Technical Topics
Stop using AI as a search engine. Here's a structured methodology for using LLMs to actually understand hard technical topics.
020
CodeWithRomi @codewithromi.bsky.social · 01/09/2026
a velcro cable wrap on the back of your mini rack panel saves more headaches than any fancy gear. tiny thing, massive difference. wrote the whole thing up on the blog #homelab #selfhosted #networking
codewithromi.com
Mini Rack Accessories You Didn't Know You Needed (But Definitely Do)
Filling a 10-inch mini rack is the easy part. Here are the accessories that make it actually usable.
010
CodeWithRomi @codewithromi.bsky.social · 30/08/2026
if you run ollama locally but still want cloud fallback when a model struggles, you can route between them automatically and have it return to local when it recovers. full walkthrough in the thread #homelab #selfhosted #docker
130
CodeWithRomi @codewithromi.bsky.social · 30/08/2026
tip: run your ai inference on a beefy machine (rtx 3090) and your assistant app on a pi 5. you get local-first ai without choking the pi. full walkthrough in the thread #homelab #selfhosted #docker
120
CodeWithRomi @codewithromi.bsky.social · 30/08/2026
n8n can watch your Ghost CMS and auto-ping Discord the second a post goes live. no code, no monthly fee, just a webhook and a couple nodes. wrote the whole thing up on the blog. #homelab #automation #selfhosted
codewithromi.com
How I Automated My Entire Website with n8n: Ghost + Discord + Zero Code
Ghost CMS publishes a new post → n8n pings Discord and welcomes new members automatically. Zero code, zero subscription fees, all running on my homelab.
030
CodeWithRomi @codewithromi.bsky.social · 28/08/2026
powering a raspberry pi through the gpio 5v pins bypasses the onboard fuse and polarity protection. you can silently fry your board and never know why. use the usb-c port. wrote the whole thing up on the blog #raspberrypi #homelab #selfhosted
codewithromi.com
Why You Shouldn't Power a Raspberry Pi Through Its GPIO Pins
Powering a Raspberry Pi through the GPIO 5V pins skips critical protection circuitry and can silently damage your board.
040
CodeWithRomi @codewithromi.bsky.social · 26/08/2026
cheap streaming sticks sometimes ship with malware already on them, straight from the factory. before you plug one in, check if it even gets security updates. most don't. wrote the whole thing up on the blog. #cybersecurity #homelab #networking
codewithromi.com
TV Streaming Sticks: Security and Privacy Red Flags to Know Before You Buy
Cheap streaming sticks can ship with pre-installed malware, shady data practices, and no security updates. Here is what to check before you plug one in.
000
CodeWithRomi @codewithromi.bsky.social · 24/08/2026
for homelab ai workloads, gen5 nvme already saturates most local model pipelines. gen6 won't change that anytime soon. wrote the whole thing up if you're deciding what to buy right now. #homelab #selfhosted #linux
codewithromi.com
PCIe Gen5 vs Gen6 for AI Storage: Which One Actually Matters for Your Homelab
PCIe Gen6 is coming, but Gen5 NVMe is already here. Here is what both generations mean for homelab AI workloads and storage decisions right now.
010
CodeWithRomi @codewithromi.bsky.social · 22/08/2026
if tailscale won't install because there's no init system, you can run it in userspace mode with no root needed. works on kindles, weird arm boards, anything constrained. wrote the whole thing up #homelab #networking #selfhosted
codewithromi.com
Tailscale Networking Tricks for Edge Devices (Kindle and Beyond)
Jailbroken Kindles can run Tailscale, and the tricks that make it work apply to any constrained edge device on your network.
010
CodeWithRomi @codewithromi.bsky.social · 20/08/2026
jellyfin runs fine on hardware you already own, even an old windows laptop collecting dust. no subscription, no content disappearing overnight. full guide on the blog #homelab #selfhosted #opensource
codewithromi.com
Build Your Own Netflix with Jellyfin (Windows, Proxmox, Linux or Docker)
Streaming keeps getting pricier and your favourite shows keep disappearing. Here is how to run your own media server with Jellyfin, whether you have an old Windows laptop, a Proxmox host, a Linux box or Docker.
020
CodeWithRomi @codewithromi.bsky.social · 18/08/2026
the asus nuc 16 with panther lake fits proxmox on a tiny footprint without sacrificing vm headroom. finally a mini pc worth considering for a proper homelab build. wrote the whole thing up on the blog #homelab #proxmox #selfhosted
codewithromi.com
ASUS NUC 16 with Panther Lake: A Compact Powerhouse for Your Homelab
ASUS is bringing the NUC 16 family powered by Intel Panther Lake, and it looks like a strong pick for a small-footprint Proxmox or homelab server.
010
CodeWithRomi @codewithromi.bsky.social · 16/08/2026
If you had to choose one machine for your local AI workload today, what are you buying? NVIDIA DGX Spark vs. ASUS Ascent GX10 (GB10) Think local LLM inference, fine-tuning, coding agents, and experimentation. Which one wins for you and why? Performance, thermals, software, value?
042
CodeWithRomi @codewithromi.bsky.social · 16/08/2026
if your discord bot dies at 3am, docker's restart policies + a watchdog healthcheck means you wake up to nothing. the bot just fixes itself. wrote the whole thing up on the blog #homelab #docker #selfhosted
codewithromi.com
Building a Self-Healing Discord Bot on My Homelab
A production Discord bot that monitors itself, auto-restarts on failure, and survives NAS crashes — Docker on a TerraMaster NAS, zero downtime, maximum reliability.
011
CodeWithRomi @codewithromi.bsky.social · 14/08/2026
crowdsec lets your server block IPs that attacked someone else's homelab yesterday, before they even reach you. community threat sharing, free, and takes about 10 mins to set up. wrote the whole thing up on the blog #homelab #cybersecurity #selfhosted
codewithromi.com
CrowdSec: Community-Powered Security
Block IPs that attacked someone else's server yesterday. Install CrowdSec on your homelab, share community blocklists, and harden everything in 10 minutes.
020
CodeWithRomi @codewithromi.bsky.social · 12/08/2026
proxmox officially supports ARM64 now, meaning you can run a proper hypervisor on raspberry pi hardware instead of hacking things together. actual cluster management, not workarounds. wrote the whole thing up on the blog #proxmox #homelab #raspberrypi
codewithromi.com
Proxmox VE Now Officially Supports ARM64: What It Means for Homelabs
Proxmox VE now officially supports ARM, and that changes what's possible for Raspberry Pi clusters and edge homelab builds.
011
CodeWithRomi @codewithromi.bsky.social · 10/08/2026
you can pipe any new ghost post straight into discord via n8n without touching a single line of code. takes about 3 minutes once n8n is running. wrote the whole thing up on the blog #selfhosted #automation #homelab
codewithromi.com
N8n Automations To install Now
Self-host n8n in 10 minutes plus 10 ready-to-steal workflows — Discord pings on new Ghost posts, weekly member digests, URL→Claude content briefs, and more.
010
CodeWithRomi @codewithromi.bsky.social · 08/08/2026
virsh lets you spin up, snapshot, and destroy VMs straight from the terminal with no vagrant overhead. way faster once you drop the abstraction layer. wrote the whole thing up on the blog #homelab #linux #selfhosted
codewithromi.com
Ditching Vagrant: Manage Local VMs with KVM and Virsh on Debian
Skip Vagrant and manage local VMs directly with KVM and virsh on Debian for a faster, leaner homelab workflow.
010
CodeWithRomi @codewithromi.bsky.social · 06/08/2026
you don't need TrueNAS to get ZFS. a plain Ubuntu install with zfsutils-linux gets you pools, snapshots, and scrubs. way less overhead than you'd think. wrote the whole thing up #homelab #selfhosted #linux
codewithromi.com
Build a Minimal ZFS NAS Without Synology, QNAP, or TrueNAS
Skip the bloated NAS software and build a lean ZFS storage server on plain Ubuntu using just the tools you actually need.
020
CodeWithRomi @codewithromi.bsky.social · 04/08/2026
if opnsense loses your main wan, it won't auto-failover unless you set the gateway group priority correctly. that one setting is what most guides skip. wrote the whole thing up #homelab #networking #selfhosted
codewithromi.com
Multi-WAN Redundancy on OPNsense: Add a Backup Internet Connection
Keep your homelab online when your ISP fails by adding a second WAN gateway to OPNsense with automatic failover.
011
CodeWithRomi @codewithromi.bsky.social · 02/08/2026
PBS pulls backups from your VMs automatically so a compromised guest can't touch its own snapshots. layer restic on top for encrypted offsite and you've got real 3-2-1 coverage. wrote the whole thing up #homelab #proxmox #selfhosted
codewithromi.com
Proxmox Backup Server-3-2-1
True 3-2-1 backups for your homelab: pull-mode PBS snapshots for every VM and LXC, encrypted Restic offsite to Backblaze B2, scheduled and verified.
010
CodeWithRomi @codewithromi.bsky.social · 31/07/2026
if you're running services at home, asymmetric encryption is the one concept worth actually understanding. it's behind every TLS cert and SSH key you use daily. wrote the whole thing up on the blog. #homelab #cybersecurity #selfhosted
codewithromi.com
The Design of Everyday Cryptography: A Homelab Primer
Cryptography isn't just for academics. Here are the core concepts every homelab builder needs to understand to keep their stack secure.
010
CodeWithRomi @codewithromi.bsky.social · 29/07/2026
kokoro tts runs fine on cpu alone, no gpu needed. wire it into n8n or a discord bot without a single api key or cloud account. wrote the whole thing up on the blog. #homelab #selfhosted #automation
codewithromi.com
Run Local TTS in Your Homelab with Kokoro (No Cloud, No API Keys)
Kokoro gives you high-quality, CPU-friendly text-to-speech you can self-host and wire into n8n or Discord bots without touching a cloud API.
152
CodeWithRomi @codewithromi.bsky.social · 27/07/2026
paperless-ngx's SMB consume folder means your scanner just saves to a network share and documents get OCR'd + indexed automatically. zero manual importing. full setup guide on the blog #homelab #selfhosted #docker
codewithromi.com
Paperless-ngx
Self-host a searchable document vault with OCR — official Docker compose (Postgres + Tika + Gotenberg), SMB consume folder for scanners, optional local AI tags.
130
CodeWithRomi @codewithromi.bsky.social · 25/07/2026
most people fail at breaking into IT because they try to learn everything at once. pick ONE lane first, cloud, cyber, dev, whatever. master that before touching anything else. full walkthrough in the thread #cybersecurity #devops #networking
100
CodeWithRomi @codewithromi.bsky.social · 25/07/2026
you don't need a vps or a library like python-telegram-bot to run a telegram bot. raw webhooks + telegram's own serverless platform is enough. wrote the whole thing up #automation #selfhosted #opensource
codewithromi.com
Build a Telegram Bot on Serverless Infrastructure (No External Dependencies)
Run a Telegram bot without a dedicated server or third-party libraries, using only Telegram's native serverless platform and raw webhooks.
030
CodeWithRomi @codewithromi.bsky.social · 23/07/2026
tested a phishing domain less than an hour old against quad9, nextdns, and control d. only one blocked it right away. the gap between them was surprising. wrote the whole thing up on the blog. #cybersecurity #networking #homelab
codewithromi.com
DNS Showdown: Testing a Brand-New Phishing Domain Against Quad9, NextDNS, and Control D
A phishing domain less than an hour old gets tested against three popular DNS security resolvers to see which one blocks it first.
021
CodeWithRomi @codewithromi.bsky.social · 21/07/2026
localsend lets you drop files between any device on your lan, no account, no cloud, no logs. works on windows, mac, linux, android, ios. it's basically airdrop but for people who actually own their network. wrote the whole thing up. #homelab #selfhosted #opensource
codewithromi.com
LocalSend: AirDrop for Your Homelab (No Cloud, No Limits)
Open-source, cross-platform AirDrop alternative for your homelab. No cloud, no accounts, no logs — just LAN file transfers that actually work everywhere.
131